Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3130372e3234362e302f32342d3234203d3e20323634363838.roa
File:                     3139302e3130372e3234362e302f32342d3234203d3e20323634363838.roa (raw, json)
Hash identifier:          VraYU4UEQDzyhlSKd5JuJynSlR4ge6NOwJ8fAug+Krg=
Subject key identifier:   87:EC:0D:F0:76:17:1C:82:11:97:F7:3D:22:0A:D0:91:60:2A:2B:B7
Certificate issuer:       /CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
Certificate serial:       2701F28E032FE1A94AD32F5466CEE9B884EB7D16
Authority key identifier: A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3130372e3234362e302f32342d3234203d3e20323634363838.roa
Signing time:             Tue 04 Feb 2025 18:37:22 +0000
ROA not before:           Tue 04 Feb 2025 18:32:22 +0000
ROA not after:            Tue 03 Feb 2026 18:37:22 +0000
asID:                     264688
IP address blocks:        190.107.246.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:01:f2:8e:03:2f:e1:a9:4a:d3:2f:54:66:ce:e9:b8:84:eb:7d:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
        Validity
            Not Before: Feb  4 18:32:22 2025 GMT
            Not After : Feb  3 18:37:22 2026 GMT
        Subject: CN=87EC0DF076171C821197F73D220AD091602A2BB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ef:6e:4f:c8:b0:f3:30:73:1c:ad:53:34:7f:
                    29:9e:a3:d9:bb:c5:7a:bb:6b:4f:e7:9a:b2:3c:33:
                    dd:83:b5:e7:b4:e2:4f:90:f7:da:2c:23:06:d6:48:
                    d0:47:27:11:b2:0e:d8:df:a6:6e:1b:2e:f3:e7:b3:
                    64:4c:5f:a8:1d:b1:ae:17:76:3b:4e:97:77:a3:4d:
                    ac:c7:7e:0b:7d:dc:1f:2f:ec:af:54:a9:cc:67:28:
                    e1:1a:36:ec:a6:7d:fe:21:02:57:4e:af:ca:91:fe:
                    44:1b:65:11:b8:b6:32:cf:c6:fe:7e:21:37:14:fe:
                    f4:87:1a:f2:db:ba:9b:0e:42:a9:9f:97:0d:13:b6:
                    cc:ae:9c:4d:72:d1:a0:64:67:b2:5d:29:a4:18:6a:
                    0d:56:24:3a:15:bf:c2:b1:fb:cd:6f:f7:9f:ed:0a:
                    c8:a8:52:63:e5:75:8e:4f:69:7e:44:df:dc:b0:0a:
                    c4:7d:1c:53:69:cb:e9:e8:c6:37:9f:67:67:2f:4e:
                    22:51:33:e9:d5:cb:bf:48:06:ba:8f:10:82:e0:65:
                    c5:29:e2:42:92:b5:ca:46:e6:96:9c:73:9a:35:f5:
                    bc:dd:f6:b9:1c:ab:63:0a:f9:60:30:31:9a:2b:8f:
                    49:05:a6:15:45:c4:c7:67:a4:a0:42:c7:e6:ad:a3:
                    34:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:EC:0D:F0:76:17:1C:82:11:97:F7:3D:22:0A:D0:91:60:2A:2B:B7
            X509v3 Authority Key Identifier:
                keyid:A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3130372e3234362e302f32342d3234203d3e20323634363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:45:ee:5c:78:00:ba:8a:9f:8e:f9:86:16:1d:30:47:04:a4:
         46:c5:66:36:d2:50:d8:9d:02:44:a6:ed:60:1f:22:ee:70:b1:
         8c:72:bf:55:1c:31:4b:37:35:cb:12:f8:1e:94:70:23:62:49:
         65:e4:23:7c:76:9d:de:09:13:f7:d3:42:20:87:ae:01:54:be:
         f6:f9:ba:e2:6f:54:71:e3:c8:75:aa:9e:5d:7a:4d:60:5a:a6:
         83:25:89:c5:0b:14:6a:1d:96:dd:1f:cf:7e:be:1c:7c:a1:10:
         b9:22:4a:eb:5f:d4:eb:e0:8d:5a:e5:0d:88:e3:82:01:b6:d4:
         c0:25:46:06:2d:23:58:3f:07:b9:ae:2c:1c:40:6f:23:01:d4:
         bd:d8:0e:82:6c:2b:ba:92:4f:dc:52:41:5a:31:a4:c7:0a:08:
         17:4c:08:eb:34:dc:77:06:14:c2:a0:ea:d0:28:23:bd:82:f5:
         7b:de:1d:95:e2:a1:b4:7a:fc:55:31:27:b1:fb:58:cf:60:f2:
         79:59:aa:bf:b0:72:2e:32:aa:ca:59:db:ef:8e:0c:f0:46:6d:
         33:56:06:f3:3b:7e:e8:fd:73:22:a2:a2:ab:80:6e:69:d8:67:
         49:54:73:9f:16:8f:96:c9:1c:1c:81:bc:4a:c0:ae:7e:8b:da:
         b1:d0:20:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:03 2025 by rpki-client